search

Code4Newark / codefornewark.org

New Jekyll site for Code for Newark based on Open Savannah brigade site
https://codefornewark.org
MIT License
1 stars 8 forks source link

Add ssl cert #30

Closed davidruffner closed 6 years ago

davidruffner commented 6 years ago

Make sure to update links in site to https

Sun-Wukong commented 6 years ago

After taking a look at the Guide to Securing your Github Pages Site with HTTPS, I learned that there is no HTTPS support for Github Pages, under a custom domain. Below is a screenshot of a relevant subsection in the doc

not_https_for_custom_domains

davidruffner commented 6 years ago

@Sun-Wukong Thanks Jason for looking into this. Yeah unfortunately they do not support fully secure websites. But it looks like you can use Cloudflare to provide some security benefits.

This post described it pretty well:

It’s important to note that this setup is not fully secure — the connection between CloudFlare and GitHub pages is not secured. Since GitHub doesn’t have a SSL certificate for your domain, Full SSL is not possible with a custom domain. However, this setup does provide some protection your users (e.g. from the hacker on the same unsecured Wi-Fi network), and it allows your site to behave as if it has SSL (e.g. for web crawlers, APIs).

I followed that post and a guide from Cloudflare to setup at least partial ssl for the website. It's propagating now...

Sun-Wukong commented 6 years ago

Ah, that's still pretty helpful @davidruffner. The SSL setup via Cloudflare would definitely help out with SEO. I was able to get a PDF report of an HTTPS test, and it was a success! I'll update this with a link to the test results

Sun-Wukong commented 6 years ago

Permission to close #30, @davidruffner ?

davidruffner commented 6 years ago

Yup, go ahead! Thanks Jason!

On Mon, Jun 11, 2018 at 10:13 AM Jason notifications@github.com wrote:

Permission to close #30 https://github.com/Code4Newark/codefornewark.org/issues/30, @davidruffner https://github.com/davidruffner ?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/Code4Newark/codefornewark.org/issues/30#issuecomment-396257789, or mute the thread https://github.com/notifications/unsubscribe-auth/AGW3PPwuoG7SHAJZEU_xUdTfz0GCbf7Gks5t7nr_gaJpZM4SrawY .